Privacy Policy

Last updated: June 11, 2026

RankTurn ("we", "us", or "the Service") is committed to protecting your privacy. This Privacy Policy ("this Policy") explains how we collect, use, share, and protect personal information in connection with the services we provide on this website. It applies to users worldwide, including users in Japan, the European Economic Area (EEA), the United Kingdom, and the United States.

Article 1 (Personal Information)

"Personal information" means information about an identified or identifiable individual, such as name, date of birth, address, telephone number, email address, and other identifiers. This includes "personal information" as defined under Japan's Act on the Protection of Personal Information and "personal data" as defined under the EU/UK General Data Protection Regulation (GDPR).

Article 2 (How We Collect Personal Information)

We collect personal information in the following ways:

• Information you provide: name, email address, and payment details (such as a credit card number) when you register or subscribe.
• Information from partners: transaction and payment-related records from our partners (including payment service providers) arising from transactions between you and those partners.
• Information you connect: data retrieved from external services you authorize, such as Google Search Console (see Article 15).
• Information collected automatically: usage data, log data, device and browser information, and cookies (see Article 13).

Article 3 (Purposes of Collection and Use)

We collect and use personal information for the following purposes:

1. To provide and operate the Service;
2. To respond to your inquiries (including verifying your identity);
3. To send you emails about new features, updates, campaigns, and other service-related information;
4. To contact you as needed for maintenance, important notices, and other communications;
5. To identify and refuse service to users who violate our Terms of Service or attempt to use the Service for fraudulent or improper purposes;
6. To let you view, change, and delete your registration information and review your usage;
7. To charge you for paid services;
8. For purposes incidental to those above.

Article 4 (Legal Bases for Processing)

If you are in the EEA or the UK, we process your personal information on the following legal bases:

• Performance of a contract: to provide the Service, manage your account, and process payments;
• Legitimate interests: to secure, maintain, analyze, and improve the Service and to prevent fraud;
• Consent: for non-essential cookies and marketing emails — you may withdraw consent at any time;
• Legal obligation: to comply with tax, accounting, and other legal requirements.

Article 5 (Service Providers and Sub-Processors)

We use trusted third-party service providers to operate the Service. They may process personal information on our behalf, only as needed to perform their services and under appropriate confidentiality and data-protection obligations.

We may also use other infrastructure and email-delivery providers solely to operate the Service. We do not sell your personal information to these providers or to anyone else.

Article 6 (AI-Generated Content and Model Training)

To generate content, the Service sends your prompts and related inputs to third-party AI providers (currently OpenAI, Anthropic, and Google for text, and fal.ai for images), which process them to return generated output.

• Under their respective API terms, these providers do not use data submitted through their APIs to train their models.
• We do not use your content to train our own or any third party's AI models.
• During content generation, the Service may also send search queries derived from your keywords and topics to external search and research APIs. These queries do not include your account information.

Article 7 (Sharing of Personal Information with Third Parties)

We do not sell or share your personal information, and we will not provide it to third parties without your prior consent, except in the following cases:

1. When required by law;
2. When necessary to protect the life, body, or property of an individual and it is difficult to obtain consent;
3. When especially necessary to improve public health or promote the sound development of children and it is difficult to obtain consent;
4. When it is necessary to cooperate with a government body or its agent in carrying out duties prescribed by law, and obtaining consent would likely impede those duties.

The following are not considered provision to a third party: disclosure to our service providers (Article 5) to the extent necessary to achieve the purposes of use; transfer in connection with a merger or other business succession; and joint use that has been disclosed to you in advance.

Article 8 (International Data Transfers)

We and our service providers are located primarily in the United States. If you access the Service from outside the United States, your personal information will be transferred to, stored, and processed in the United States and other countries whose data-protection laws may differ from those of your own country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Article 9 (Data Retention)

We retain personal information for as long as your account is active and as needed to provide the Service. After you delete your account, we delete or anonymize your personal information within a reasonable period, except where we must retain it to comply with legal obligations (such as tax and accounting records) or to resolve disputes.

Article 10 (Your Rights)

You can view, update, and delete much of your information at any time from the Service's settings. Depending on where you live, you may also have the following rights. To exercise them, contact us through our contact form; we will respond within the period required by applicable law.

• EEA / UK (GDPR): the rights to access, rectify, erase, restrict, and object to the processing of your personal data; the right to data portability; the right to withdraw consent; and the right to lodge a complaint with your local data protection authority.
• California (CCPA/CPRA): the rights to know, delete, and correct your personal information, to opt out of its sale or sharing, and to non-discrimination for exercising your rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding 12 months.
• Japan (Act on the Protection of Personal Information): the rights to request disclosure, correction, addition, deletion, and suspension of use of your personal information. A fee of 1,000 yen per request may apply to disclosure requests under Japanese law.

Article 11 (Security)

We take reasonable technical and organizational measures to protect personal information. For example, integration access tokens and refresh tokens are encrypted at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Article 12 (Children's Privacy)

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

Article 13 (Use of Cookies)

We use cookies to improve usability and for access analysis. Cookies identify browsers but maintain anonymity and cannot identify specific individuals on their own. If you do not wish to use cookies, you can disable them in your browser settings. For more detail, see our Cookie Policy.

Article 14 (Analytics)

We use Google Analytics, an access-analysis tool provided by Google. Google Analytics uses cookies to collect access information anonymously; it does not identify individuals. We also use Vercel Analytics and Vercel Speed Insights, which collect aggregated usage and performance data without using cookies.

You can refuse data collection by Google Analytics by disabling cookies in your browser settings. For the Google Analytics terms of use, see the Google Analytics Terms of Service.

Article 15 (Google Search Console Integration)

The Service can retrieve search-performance data for your website through the Google Search Console API.

1. Data Collected

The following data is collected through the Google Search Console API:

• Search queries (keywords)
• Clicks
• Impressions
• Average position
• Page URLs
• Other search-performance data

2. Purposes of Use

The collected data is used solely for the following purposes:

• SEO performance analysis of your website;
• Keyword ranking tracking;
• Content improvement suggestions.

3. Data Storage

The collected data is encrypted and stored in association with your account. Access tokens and refresh tokens are also encrypted and stored securely.

4. No Third-Party Sharing

Data obtained from Google Search Console is not provided, sold, or disclosed to any third party.

5. Compliance with the Google API Services User Data Policy

Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements. The collected data is used only to the extent necessary to provide the Service.

6. Revoking Access

You may disconnect Google integration at any time from the Service's settings page. On disconnection, we delete all Google Search Console data we have stored. You may also revoke access from the Google Account Permissions page.

7. Scopes Used

We use only the webmasters.readonly (read-only) scope. We do not modify, delete, or otherwise alter your Search Console data.

Article 16 (Changes to This Policy)

We may change this Policy except as otherwise provided by law or in this Policy. Unless we specify otherwise, the revised Policy takes effect when it is posted on this website. When we make significant changes, we will notify users.

Article 17 (Contact)

If you have any questions about this Policy or wish to exercise your rights, please reach out through our contact form.